System, method, and program for structured document derivation

ABSTRACT

A system, a method, and a program for structured document derivation for generating derived structured documents of different representations having the same contents, facilitating the test for a structured document processor, and avoiding the vulnerability of the structured document processing. A monitor monitors a call from a structured document processing generator to a structured document processor to have a test structured document. A structured document derivation system generates derived structured documents of the test structured document. The derived structured documents are sent to a testing device for testing the structured document processor. A test analyzer determines whether or not each derivative pattern can be accepted. When the processing of a structured document is requested, the test analyzer analyzes the document. When the structured document matches an unacceptable pattern, the document is replaced with an acceptable one.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to a system, a method and a program forstructured document derivation for converting a structured document fromone representation to another without changing the contents of thedocument.

2. Description of the Prior Art

An example of a conventional structured document test generating systemis disclosed in Japanese Patent Application laid open No. 2003-280942.FIG. 1 is a block diagram showing the conventional structured documenttest generating system. As shown in FIG. 1, the conventional structureddocument test generating system comprises a structured document typedefining document inputting section 11, a structured document typedefining document analyzer 12 and a test program generator 13. Suchconventional structured document test generating system operates asfollows. A structured document type defining document 10 such as DTD(Document Type Definition) is input to the structured document typedefining document inputting section 11 to be analyzed in the structureddocument type defining document analyzer 12. Based on the analysisresult, the test program generator 13 generates a test program 15 of thestructured document.

Further, Japanese Patent Application laid open No. 2002-342316 disclosesan example of a conventional structured document conversion system. FIG.2 is a block diagram showing the conventional structured documentconversion system. As shown in FIG. 2, the conventional structureddocument conversion system comprises a structured document typeconversion defining document inputting section 22, a structured documentinputting section 23 and a structured document converter 24. Suchconventional structured document conversion system operates as follows.A structured document type conversion defining document 21 is input tothe structured document type conversion defining document inputtingsection 22. According to the rule of the input document, the structureddocument converter 24 converts the structure of a structured document 20input from the structured document inputting section 23 to output apurposive form structured document 25 different from the inputstructured document 20.

The first problem is that the structured document conversion system hasnot generated structured documents of different representations havingthe same contents. With a structured document, because it is possible tohave the same data in common among a plurality of systems, systems fordocument structure conversion have been highly developed for acceptingthe difference among document structures in the systems. On the otherhand, it has not been conceived to convert a structured document toderivatives in different representations having the same contents.Incidentally, “structured documents of different representations havingthe same contents” indicate structured documents the same in structureand information therein and different in output representation such asname of namespace, space for indentation, or character code.

The second problem is that the structured document test generatingsystem has focused on generating, by using a structured document typedefining document, a structured document meeting the definition toaccept it, and has not allowed enough for the variation ofrepresentations of a structured document. In a conventional testgenerating system, while the conversion of contents and structure ofinput data is an important test item, it has never been thought aboutwhether or not structured documents generally showing a diversity inrepresentation of the same contents of data are all acceptable.

The third problem is that structured document processing systems havenot worked together for automatically avoiding structured documentshaving a vulnerable pattern by inputting test results indicating thediversity of representation of a structured document to a system forautomatically compensating weakness in the performance of the systems.This is because there has been neither a system focusing on thediversity of representation of a structured document nor considerationfor the use of the test results as to the diversity of representationfor automatically compensating weakness in the performance of thesystems in runtime.

The fourth problem is that a system has not invented for improving thequality of processes of a structured document processing system byproviding an intermediate node. The intermediate node has beenconsidered to mainly perform logging, routing and representationconversion and the use of the intermediate node has not been consideredto improve the end service without changing data contents.

SUMMARY OF THE INVENTION

It is therefore the first object of the present invention to provide astructured document derivation system in which structured documents ofdifferent representations having the same contents can be derived from astructured document.

The second object is to provide a structured document test system fortesting whether or not a system can accept structured documents ofvarious representations having the same contents derived from astructured document.

The third object is to provide a structured document vulnerabilityavoidance system capable of avoiding vulnerability of processing abilityin runtime by applying the result obtained by the structured documenttest system for various representations.

The fourth object is to provide a quality improvement system applying,as an intermediate node for relaying a structured document, thestructured document vulnerability avoidance system capable of avoidingvulnerability of processing ability without changing the data contentsof the structured document.

A structured document derivation system of the present inventioncomprises a structured document inputting section, a structured documentderivative generator, and derivation functions, in which, by applyingthe derivation functions, a plurality of derivatives of differentrepresentations having the same contents are generated. By virtue ofthis construction, derivatives are generated from a structured document.Thus, it is possible to achieve the first object.

A structured document test system of the present invention comprises astructured document derivation system, a testing device, and a testanalyzer, in which, from an input test structured document, a pluralityof derivatives are generated and input to a structured documentprocessor to test them, and the results are analyzed. By virtue of thisconstruction, the structured document processor is tested, and thereforeit is possible to achieve the second object.

A structured document vulnerability avoidance system of the presentinvention comprises a pattern sensing device and a pattern replacementdevice, in which a pattern for vulnerability is detected from an inputfrom a structured document processing request device, and according to avulnerability pattern and a structured document type defining documentreceived, when the pattern matches the vulnerability pattern, thepattern is replaced by a pattern which does not fit the vulnerabilitypattern. By virtue of this construction, vulnerability of a structureddocument is avoided. Thus it is possible to achieve the third object.

A quality improvement system provided with the structured documentvulnerability avoidance system of the present invention as anintermediate node comprises a structured document type definingdocument, a vulnerability pattern and the structured documentvulnerability avoidance system on a computer of another intermediatenode where a structured document processor is not placed, whereinvulnerability of the structured document processor is avoided by theintermediate node. By virtue of this construction, a structured documentprocessor is improved in quality from the outside. Thus it is possibleto achieve the fourth object.

According to the first aspect of the present invention, there isprovided a structured document derivation system for generatingderivatives of different representations without changing the contents.

According to the second aspect of the present invention, there isprovided a structured document test system for testing a structureddocument processing system, wherein derived structured documents ofvarious representations having the same contents are generated andtested.

According to the third aspect of the present invention, there isprovided a structured document vulnerability avoidance system being anintermediate system for processing a structured document, havinginformation on the vulnerability pattern of derivatives of a structureddocument for a structured document processing system, wherein astructured document in a pattern that matches the vulnerability patternis replaced by a derivative acceptable to the structured documentprocessing system to be fed to the structured document processingsystem.

According to the fourth aspect of the present invention, there isprovided a structured document derivation system comprising an inputtingsection for accepting an input of a structured document, derivationfunctions for converting the representation of the structured documentwithout changing the contents of the structured document, a structureddocument derivative generator for generating a plurality of derivedstructured documents of different representations without changing thecontents of the structured document by using the input structureddocument and the derivation functions.

According to the fifth aspect of the present invention, in the fourthaspect, the structured document derivation system further comprises astructured document type defining document inputting section foraccepting an input of a structured document type defining document,wherein the structured document derivative generator generates derivedstructured documents based on information from the structured documenttype defining document.

According to the sixth aspect of the present invention, there isprovided a structured document test system comprising the structureddocument derivation system in the fourth-or fifth aspect, a testingdevice for testing a structured document processor by applying derivedstructured documents generated by the structured document derivationsystem, and a test analyzer for analyzing test results obtained by thetesting device to output the test results.

According to the seventh aspect of the present invention, in the sixthaspect, in the structured document test system, the test analyzerfurther outputs, in addition to the test results, information on avulnerability pattern which can not be processed by the structureddocument processor.

According to the eighth aspect of the present invention, in the sixth orseventh aspect, the structured document test system further comprises adisplay for displaying the test results.

According to the ninth aspect of the present invention in one of thesixth to eighth aspects, the structured document test system furthercomprises a monitor for monitoring a processing request to thestructured document processor from a structured document processinggenerator to have a test structured document, wherein based on the teststructured document obtained from the monitor, derived structureddocuments are generated and the structured document processor is tested.

According to the tenth aspect of the present invention, there isprovided a structured document vulnerability avoidance system comprisinga structured document processing request device for requesting thestructured document processor to perform structured document processing,a pattern sensing device for inputting a vulnerability pattern anddetermining whether or not the structured document processing requestincludes the processing of a structured document that matches thevulnerability pattern, and a pattern replacement device for replacingthe structured document with one in a representation that does not matchthe vulnerability pattern in the case that the pattern sensing devicehas determined that the pattern of the structured document matches thevulnerability pattern.

According to the eleventh aspect of the present invention, in the tenthaspect, the structured document vulnerability avoidance system furthercomprises a structured document test system to have the vulnerabilitypattern to be utilized, wherein the vulnerability of the structureddocument processor can be avoided in cooperation with results obtainedby the structured document test system.

According to the twelfth aspect of the present invention, in the tenthaspect, the structured document vulnerability avoidance system furthercomprises a monitor for monitoring the structured document processingrequest to the structured document processor, and a structured documenttest system for testing the structured document processor by generatingderived structured documents based on a test structured document fromthe monitor, wherein, based on the test structured document from themonitor, the derived structured documents are generated to test thestructured document processor, and the vulnerability pattern obtained asthe test results is applied for avoiding vulnerability of the structureddocument processor.

According to the thirteenth aspect of the present invention, there isprovided a quality improvement system for the structured documentprocessor, wherein the structured document vulnerability avoidancesystem in one of the tenth to twelfth aspects is placed on the samecomputer where the structured document processor is placed so that thestructured document processor is not accessed directly from the outsidebut via the structured document vulnerability avoidance system to builda structured document processing system not including vulnerability.

According to the fourteenth aspect of the present invention, there isprovided a quality improvement system for the structured documentprocessor, wherein the structured document vulnerability avoidancesystem in one of the tenth to twelfth aspects is placed on a secondcomputer different from a first computer on which the structureddocument processor is placed, and the structured document vulnerabilityavoidance system on the second computer avoids vulnerability of thestructured document processor on the first computer.

According to the fifteenth aspect of the present invention, there isprovided a structured document derivation method comprising the steps ofregistering derivation functions capable of converting representationwithout changing the contents of a structured document, accepting aninput of a structured document, and generating a plurality of derivedstructured documents in various representations without changing thecontents.

According to the sixteenth aspect of the present invention, there isprovided a structured document derivation method comprising the steps ofregistering derivation functions capable of converting representationwithout changing the contents of a structured document, registering astructured document type defining document for a structured document,accepting an input of a structured document, and generating a pluralityof derived structured documents of different representations withoutchanging the contents.

According to the seventeenth aspect of the present invention, there isprovided a structured document test method comprising the steps oftesting a structured document processor applying the derived structureddocuments generated by the structured document derivation method in thefifteenth or sixteenth aspect, analyzing the results of the test, andoutputting the results.

According to the eighteenth aspect of the present invention, in theseventeenth aspect, the structured document test method furthercomprises the step of outputting information on a vulnerability patternwhich cannot be processed by the structured document processor.

According to the nineteenth aspect of the present invention, in theseventeenth or eighteenth aspect, the test method further comprises thestep of displaying the test results.

According to the twentieth aspect of the present invention, in one ofthe seventeenth to nineteenth aspects, the structured document testmethod further comprises the steps of monitoring a processing requestfrom a structured document processing generator to the structureddocument processor, and accepting a structured document obtained throughthe monitoring as an input.

According to the twenty-first aspect of the present invention, there isprovided a structured document vulnerability avoiding method comprisingthe steps of registering a vulnerability pattern, inputting a structureddocument processing request to a structured document processor,determining whether or not the structured document processing requestincludes the processing of a structured document in a pattern thatmatches the vulnerability pattern, and when the structured document hasbeen determined to match the vulnerability pattern, replacing therepresentation of the structured document with one that does not matchthe vulnerability pattern.

According to the twenty-second aspect of the present invention, in thetwenty-first aspect, the structured document vulnerability avoidingmethod further comprises the steps of testing the structured documentprocessor by the structured document test method, and avoiding thevulnerability by applying the vulnerability pattern obtained as the testresults.

According to the twenty-third aspect of the present invention, in thetwenty-first aspect, the structured document vulnerability avoidingmethod further comprises the steps of monitoring the structured documentprocessing request to the structured document processor, testing thestructured document processor by using the results of the monitoringaccording to the structured document test method, and avoidingvulnerability applying a vulnerability pattern obtained as the testresults.

According to the twenty-fourth aspect of the present invention, there isprovided a program for making a computer to perform the processes ofregistering derivation functions capable of converting representationwithout changing the contents of a structured document, accepting aninput of a structured document, and generating a plurality of derivedstructured documents in different representations without changing thecontents.

According to the twenty-fifth aspect of the present invention, there isprovided a program for making a computer to perform the processes ofregistering derivation functions capable of converting representationwithout changing the contents of a structured document, registering astructured document type defining document of a structured document,accepting an input of a structured document, and generating a pluralityof derived structured documents in various representations withoutchanging the contents.

According to the twenty-sixth aspect of the present invention, in thetwenty-fourth or twenty-fifth aspect, the program further makes acomputer to perform the processes of testing a structured documentprocessor applying the derived structured documents generated by thestructured document derivation method, analyzing the results of thetest, and outputting the results.

According to the twenty-seventh aspect of the present invention, in thetwenty-sixth aspect, the program further makes a computer to perform theprocess of outputting information on a vulnerability pattern whichcannot be processed by the structured document processor.

According to the twenty-eighth aspect of the present invention, in thetwenty-sixth or twenty-seventh aspect, the program further makes acomputer to perform the process of displaying the test results.

According to the twenty-ninth aspect of the present invention, in one ofthe twenty-sixth to twenty-eighth aspects, the program further makes acomputer to perform the processes of monitoring a processing requestfrom a structured document processing generator to the structureddocument processor, and inputting a structured document obtained throughthe monitoring to the program.

According to the thirtieth aspect of the present invention, there isprovided a program for making a computer to perform the processes ofregistering a vulnerability pattern, inputting a structured documentprocessing request to a structured document processor, determiningwhether or not the structured document processing request includes theprocessing of a structured document that matches the vulnerabilitypattern, and when the structured document has been determined to matchthe vulnerability pattern, replacing the representation of thestructured document with one that does not match the vulnerabilitypattern.

According to the thirty-first aspect of the present invention, in thethirtieth aspect, the program further makes a computer to perform theprocesses of testing the structured document processor by the structureddocument test method, and inputting a vulnerability pattern obtained asthe test results to the program.

According to the thirty-second aspect of the present invention, in thethirtieth aspect, the program further makes a computer to perform theprocesses of monitoring the structured document processing request tothe structured document processor, testing the structured documentprocessor by using the results of the monitoring according to thestructured document test method, and inputting a vulnerability patternobtained as the test results to the program.

BRIEF DESCRIPTION OF THE DRAWINGS

The above and further objects and novel features of the invention willbe more fully understood from the following detailed description whenthe same is read in connection with the accompanying drawings in which:

FIG. 1 is a block diagram showing a conventional structured documenttest generating system;

FIG. 2 is a block diagram showing a conventional structured documentconversion system;

FIG. 3 is a block diagram showing the structure of a structured documentderivation system according to the first embodiment;

FIG. 4 is a flowchart showing the operation of the structured documentderivation system of the first embodiment;

FIG. 5 is a block diagram showing the structure of a structured documentderivation system according to the second embodiment;

FIG. 6 is a block diagram showing the structure of a structured documenttest system according to the third embodiment;

FIG. 7 is a block diagram showing the structure of a structured documenttest system according to the fourth embodiment;

FIG. 8 is a block diagram showing the structure of a structured documenttest system according to the fifth embodiment;

FIG. 9 is a block diagram illustrating the sixth embodiment of thepresent invention;

FIG. 10 is a flowchart showing the operation of the sixth embodiment;

FIG. 11 is a block diagram showing the structure of a structureddocument vulnerability avoidance system according to the seventhembodiment;

FIG. 12 is a flowchart showing the operation of the structured documentvulnerability avoidance system of the seventh embodiment;

FIG. 13 is a block diagram illustrating the eighth embodiment of thepresent invention;

FIG. 14 is a block diagram illustrating the ninth embodiment of thepresent invention;

FIG. 15 is a block diagram showing the structure of a structureddocument processor quality improvement system according to the tenthembodiment;

FIG. 16 is a block diagram showing the structure of another structureddocument processor quality improvement system according to the tenthembodiment;

FIG. 17 is a diagram for explaining a concrete example of structureddocuments according to the first embodiment;

FIG. 18 is a diagram for explaining a concrete example of the operationaccording to the second embodiment; and

FIG. 19 is a diagram for explaining a concrete example of the operationaccording to the fourth embodiment.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A Detailed Descriptionwill be Given of the Preferred Embodiments of the Present Invention withReference to the Accompanying Drawings

FIG. 3 is a block diagram showing the structure of a structured documentderivation system according to the first embodiment. Referring to FIG.3, a structured document derivation system 34 comprises a structureddocument inputting section 31 to which a structured document 30 isinput, a structured document derivative generator 32 for generatingderivatives of the structured document 30, and derivation functions 33for providing the structured document derivative generator 32 withfunctions for derivation.

The structured document inputting section 31 accepts the input of thestructured document 30 from the outside and converts the document 30 tothe system's internal representation to send it to the structureddocument derivative generator 32. The structured document derivativegenerator 32 converts the structured document 30 in the internalrepresentation received from the structured document inputting section31 by the derivation functions 33 to output structured documents ofdifferent representations having the same contents 35. The structureddocument derivation system 34 comprising the structured documentinputting section 31, the structured document derivative generator 32,and the derivation functions 33, as a whole, receives the structureddocument 30 as an input and outputs the structured documents ofdifferent representations having the same contents 35.

Next, a detailed description will be given of the operation of thisembodiment with reference to a flowchart of FIG. 4. The derivationfunctions 33 are registered in advance (step 60). The structureddocument 30 is input to be converted to the system's internalrepresentation by the structured document inputting section 31 (step61). The structured document derivative generator 32 receives thestructured document in the system's internal representation as an inputand generates derivatives of the structured document 30 (step 62). Thestructured document derivative generator 32 outputs the structureddocuments of different representations having the same contents 35 (step63).

As described above, in this embodiment, the derivation functions 33 canbe registered. Therefore, derivatives of the structured document 30 invarious representations can be generated according to the features ofthe registered derivation functions 33. Different derivatives can begenerated by adding or replacing the derivation functions 33. Further,more derivatives can be generated by the combination of the derivationfunctions 33.

A Detailed Description will be Given of the Second Embodiment

FIG. 5 is a block diagram showing the structure of a structured documentderivation system according to the second embodiment. Incidentally, likereference numerals refer to corresponding parts throughout the drawings.

Referring to FIG. 5, the structured document derivation system 34comprises the structured document inputting section 31 to which thestructured document 30 is input, a structured document type definingdocument inputting section 41 to which a structured document typedefining document 40 is input, the structured document derivativegenerator 32 for generating derivatives of the structured document 30,and the derivation functions 33 for providing the structured documentderivative generator 32 with functions for derivation.

The structured document inputting section 31 accepts an input of thestructured document 30 from the outside and converts the document 30 tothe system's internal representation to send it to the structureddocument derivative generator 32. The structured document type definingdocument inputting section 41 accepts an input of the structureddocument type defining document 40 from the outside to feed it to thestructured document derivative generator 32. The structured documentderivative generator 32 converts the structured document in the system'sinternal representation received from the structured document inputtingsection 31 by the derivation functions 33 referring to the structureddocument type defining document 40 to output structured documents ofdifferent representations having the same contents 35. The structureddocument derivation system 34 comprising the structured documentinputting section 31, the structured document derivative generator 32,the derivation functions 33, and the structured document type definingdocument inputting section 41, as a whole, receives the structureddocument 30 and the structured document type defining document 40 asinputs, and outputs the structured documents of differentrepresentations having the same contents 35.

In this embodiment, because the structured document type definingdocument 40 is accepted as an input, more type information onderivatives of the structured document 30 in various representations canbe generated according to more information on the type of the document30 and the derivation functions 33.

A Detailed Description will be Given of the Third Embodiment

FIG. 6 is a block diagram showing the structure of a structured documenttest system according to the third embodiment. Referring to FIG. 6, astructured document test system 54 comprises the structured documentderivation system 34 for accepting an input of a test structureddocument 50 and an input of the structured document type definingdocument 40 as an option to generate derived structured documents, atesting device 51 for testing a structured document processor 55 usingthe derived structured documents output from the structured documentderivation system 34, and a test analyzer 52 for analyzing the testresults obtained by the testing device 51.

The structured document derivation system 34 accepts an input of thetest structured document 50 from the outside to generate derivatives ofthe test structured document 50 and feeds them to the testing device 51.The testing device 51 sends the derivatives to the structured documentprocessor 55 to monitor whether or not the derivatives are receivedproperly and a proper answers are returned. The test results are fed tothe test analyzer 52 and analyzed to be output as test results 53.

In the third embodiment, by the input of the test structured document50, the structured document derivation system 34 generates manystructured documents of different representations having the samecontents to input them to the testing device 51 for testing thestructured document processor 55. Therefore, it is possible to performexhaustive test for representations of the structured document.

A Detailed Description will be Given of the Fourth Embodiment

FIG. 7 is a block diagram showing the structure of a structured documenttest system according to the fourth embodiment. Referring to FIG. 7, thestructured document test system 54 comprises the structured documentderivation system 34 for accepting inputs of the test structureddocument 50 and the structured document type defining document 40 togenerate derivatives of the structured document, the testing device 51for testing the structured document processor 55 by applying thederivatives output from the structured document derivation system 34,the test analyzer 52 for analyzing the results obtained by the testingdevice 51. The test analyzer 52 outputs a vulnerability pattern 70indicating the vulnerability of the structured document processor 55with respect to the acceptability of structured documents as well as thetest results 53.

The structured document derivation system 34 accepts inputs of the teststructured document 50 and the structured document type definingdocument 40 from the outside to generate derivatives of the teststructured document 50, and feeds them to the testing device 51. Thetesting device 51 sends the derivatives to the structured documentprocessor 55, and monitors whether or not the derivatives are receivedproperly and proper answers are returned. The test results are fed tothe test analyzer 52. The test analyzer analyzes the test results andoutputs the test results 53 and the vulnerability pattern 70.

In the fourth embodiment, from the test analyzer 52, the test results 53and the vulnerability pattern 70 are output. The vulnerability pattern70 is data indicating an representation of a structured document, whichcould not be accepted by the structured document processor 55, and canbe applied to the construction of other systems using the data.

A Detailed Description will be Given of the Fifth Embodiment

FIG. 8 is a block diagram showing the structure of a structured documenttest system according to the fifth embodiment. Referring to FIG. 8illustrating the fifth embodiment, there are shown the structureddocument test system 54 and a test results display 90. The structureddocument test system 54 comprises the structured document derivationsystem 34 for accepting an input of the test structured document 50 andthe structured document type defining document 40 to generatederivatives of the structured document, the testing device 51 fortesting the structured document processor 55 by applying the derivativesoutput from the structured document derivation system 34, the testanalyzer 52 for analyzing the results from the testing device 51.

The structured document derivation system 34 accepts an input of thetest structured document 50 and optionally accepts an input of thestructured document type defining document 40 from the outside togenerate derivatives of the test structured document 50 and feeds themto the testing device 51. The testing device 51 sends the derivatives tothe structured document processor 55, and monitors whether or not thederivatives are received properly and proper answers are returned. Thetest results are fed to the test analyzer 52 and analyzed to be outputas the test results 53. The test results 53 are displayed on the testresult display 90 such as a computer display or the like.

In the fifth embodiment, the test results 53 being an output from thestructured document test system 54 can be displayed on the test resultdisplay 90. Therefore, the test results 53 can be checked easily.

A Detailed Description will be Given of the Sixth Embodiment

FIG. 9 is a block diagram showing the sixth embodiment of the presentinvention. Referring to FIG. 9 illustrating the sixth embodiment, thereare shown a monitor 101 for monitoring a processing request from astructured document processing generator 100 to the structured documentprocessor 55, and the structured document test system 54. The structureddocument test system 54 comprises the structured document derivationsystem 34 for accepting inputs of the test structured document 50monitored by the monitor 101 and the structured document type definingdocument 40 to generate derivatives of the structured document, thetesting device 51 for testing the structured document processor 55 byapplying the derivatives output from the structured document derivationsystem 34, and the test analyzer 52 for analyzing the test results fromthe testing device 51.

The structured document processing generator 100 sends a processingrequest to the structured document processor 55. The monitor 101monitors the processing request to create the test structured document50. The structured document derivation system 34 inputs the teststructured document 50 and the structured document type definingdocument 40 from the outside to generate derivatives of the teststructured document 50, and feeds them to the testing device 51. Thetesting device 51 sends the derivatives to the structured documentprocessor 55, and monitors whether or not the derivatives are properlyaccepted and proper answers are returned. The test results are fed tothe test analyzer 52 to be analyzed and output as the test results 53.

In other words, a call or a processing request issued from thestructured document processing generator 100 to the structured documentprocessor 55 is monitored by the monitor 101 to have the test structureddocument 50. From the test structured document 50, the structureddocument derivation system 34 generates derived structured documents.With the derived structured documents, the testing device 51 tests thestructured document processor 55. The test analyzer 52 distinguishesbetween acceptable derived patterns and unacceptable derived patterns.The test analyzer 52 analyzes a structured document with respect to astructured document processing request in run time. When the structureddocument matches the unacceptable derived pattern, the test analyzerreplaces the document with one in the acceptable derived pattern. As aresult, derived structured documents of various representations havingthe same contents as an original structured document can be generated,and a structured document processing system can be easily tested.Further, a system for avoiding the vulnerability of structured documentprocessing can be built.

Next, a description will be given of the operation of the sixthembodiment with reference to a flowchart of FIG. 10. The monitor 101monitors a structured document being a processing request from thestructured document processing generator 100 to the structured documentprocessor 55 to generate the test structured document 50 (step 110). Byusing the test structured document 50 and the structured document typedefining document 40 as an option, the structured document derivationsystem 34 generates derivatives (step 111). The testing device 51selects one of the derivatives to be tested by the structured documentprocessor 55 (step 112). Next, the testing device 51 determines whetheror not all the derived documents are tested. If there is any derivativeleft untested, the step 112 is repeated (step 113). When all thederivatives are tested, the test analyzer 52 analyzes the test resultsto round it up (step 114). The test results are output (step 115).

In the sixth embodiment, a processing request from the structureddocument processing generator 100 to the structured document processor55 is monitored to have the test structured document 50 which is to beused as an input to the structured document test system 54. Therefore,the structured document processor 55 can be tested precisely.

A Detailed Description will be Given of the Seventh Embodiment

FIG. 11 is a block diagram showing the structure of a structureddocument vulnerability avoidance system according to the seventhembodiment. Referring to FIG. 11, a structured document vulnerabilityavoidance system 123 comprises a pattern sensing device 121 and apattern replacement device 122. The pattern sensing device 121 receivesa processing request from a structured document processing requestdevice 120, inputs the vulnerability pattern 70 and the structureddocument type defining document 40 as an option to detect the patternfrom the processing request. The pattern replacement device 122 replacesthe structured document that matches the vulnerability pattern 70 in thepattern sensing device 121.

A processing request from the structured document processing requestdevice 120 is sent to the pattern sensing device 121. The patternsensing device 121 inevitably waits an input of a vulnerability patternand optionally waits an input of the structured document type definingdocument 40. The pattern sensing device 121 detects whether or not adocument as the processing request include the vulnerability pattern. Inthe case that the document includes the vulnerability pattern, thedocument is supplied to the pattern replacement device 122 to beconverted to a structured document in a pattern that does not match thevulnerability pattern. The pattern replacement device 122 sends thedocument not including the vulnerability pattern to the structureddocument processor 55.

A detailed description will be given of the operation of the seventhembodiment with reference to a flowchart of FIG. 12. A vulnerabilitypattern is input to the pattern sensing device 121 (step 130). Thestructured document type defining document 40 is input to the patternsensing device 121 (not shown). A structured document processing requestis sent from the structured document processing request device 120 (step131). The pattern sensing device 121 detects whether or not a documentreceived as the processing request includes a pattern that matches thevulnerability pattern 70 (step 132). When the processing requestincludes a pattern that matches the vulnerability pattern 70, thepattern replacement device 122 replaces it with the pattern that doesnot match the vulnerability pattern 70 (step 133). The structureddocument thus replaced is sent to the structured document processor 55.When the document input as the processing request does not include apattern that matches the vulnerability pattern 70, the document isdirectly sent to the structured document processor 55 (step 134).

In the seventh embodiment, by using the vulnerability pattern 70, thepattern replacement device 122 can convert a processing request from thestructured document processing request device 120 to the structureddocument processor 55 to a structured document that does not match thevulnerability pattern 70 before sending it to the structured documentprocessor 55. Thus, such structured document which the structureddocument processor 55 cannot process can be avoided.

A Detailed Description will be Given of the Eighth Embodiment

Referring to FIG. 13 illustrating the eighth embodiment, there are shownthe structured document test system 54 inputting the test structureddocument 50 and the structured document type defining document 40 andconnected to the structured document processor 55, and the structureddocument vulnerability avoidance system 123. The structured documentvulnerability avoidance system 123 comprises the pattern sensing device121 and the pattern replacement device 122. The pattern sensing device121 inputs the vulnerability pattern 70 from the structured documenttest system 54 and the structured document type defining document 40.Further, having received a processing request from the structureddocument processing request device 120, the pattern sensing device 121detects the pattern of the processing request device 120. The patternreplacement device 122 replaces the structured document determined tomatch the vulnerability pattern 70 in the pattern sensing device 121.

On receipt of inputs of the test structured document 50 and thestructured document type defining document 40 as an option, thestructured document test system 54 tests the structured documentprocessor 55 to generate the vulnerability pattern 70. The patternsensing device 121 inputs the vulnerability pattern 70 and thestructured document type defining document 40 as an option, and furtherreceives a structured document as a processing request from thestructured document processing request device 120 to detect whether ornot the vulnerability pattern 70 is included in the document as theprocessing request. In the case where the vulnerability pattern 70 isincluded, the document is fed to the pattern replacement device 122 tobe converted to the structured document that does not match thevulnerability pattern 70. Thereby, the document that does not match thevulnerability pattern 70 is sent to the structured document processor55.

In this embodiment, by using the vulnerability pattern 70 generated bythe structured document test system 54, a processing request from thestructured document processing request device 120 to the structureddocument processor 55 can be converted to the structured document notincluding the vulnerability pattern 70 to be sent to the structureddocument processor 55. Therefore, it is possible to avoid the structureddocument incapable of being processed by the structured documentprocessor 55.

A Detailed Description will be Given of the Ninth Embodiment

Referring to FIG. 14 illustrating the ninth embodiment, there are shownthe monitor 101 for monitoring processing requests from the structureddocument processing generator 100 to the structured document processor55, the structured document test system 54 for inputting the teststructured document 50 monitored by the monitor 101 and the structureddocument type defining document 40 connected to the structured documentprocessor 55, and the structured document vulnerability avoidance system123. The structured document vulnerability avoidance system 123comprises the pattern sensing device 121 and the pattern replacementsystem 122. The pattern sensing device 121 inputs the vulnerabilitypattern 70 from the structured document test system 54 and thestructured document type defining document 40. Further, having receiveda processing request from the structured document processing requestdevice 120, the pattern sensing device 121 detects the pattern of theprocessing request. The pattern replacement device 122 replaces thestructured document determined to match the vulnerability pattern 70 inthe pattern sensing device 121.

The structured document processing generator 100 makes a processingrequest to the structured document processor 55. The monitor 101monitors the processing request to make the test structured document 50.The structured document test system 54 which has accepted inputs of thetest structured document 50 and the structured document type definingdocument 40 as an option tests the structured document processor 55 togenerate the vulnerability pattern 70. The pattern sensing device 121inputs the vulnerability pattern 70 and the structured document typedefining document 40 as an option. Further, having received a structureddocument as the processing request from the structured documentprocessing request device 120, the pattern sensing device 121 detectswhether or not the document as processing request includes thevulnerability pattern 70. In the case where the vulnerability pattern 70is included, the document is fed to the pattern replacement device 122to be converted to the structured document not matching thevulnerability pattern 70. Thereby, the document that does not match thevulnerability pattern 70 is sent to the structured document processor55.

In this embodiment, a processing request from the structured documentprocessing generator 100 to the structured document processor 55 ismonitored and the monitored data is input to the structured documenttest system 54 as the test structured document 50 for generating thevulnerability pattern 70. Then, the processing request from thestructured document processing request device 120 to the structureddocument processor 55 is converted to the structured document notmatching the vulnerability pattern 70 before being sent to thestructured document processor 55. Thus, it is possible to avoid thestructured document incapable of being processed by the structureddocument processor 55.

A Detailed Description will be Given of the Tenth Embodiment

FIGS. 15 and 16 are diagrams showing examples of the structure of astructured document processor quality improvement system according tothe tenth embodiment. In FIG. 15, the structured document type definingdocument 40, the vulnerability pattern 70, the structured documentvulnerability avoidance system 123, and the structured documentprocessor 55 are allocated in a computer B 151. In FIG. 16, thestructured document type defining document 40, the vulnerability pattern70, and the structured document vulnerability avoidance system 123 areallocated in a computer C 161, and the structured document processor 55is allocated in another computer B 162.

In the structure of FIG. 15, the structured document processor 55 cannotbe seen from the outside, and all processing requests from the outsideare received at the structured document vulnerability avoidance system123. Thereby, the structured document processor in the computer B 151can process a structured document as a processing request in anyrepresentation sent from the structured document processing requestdevice 120 in a computer A 150. On the other hand, in the structure ofFIG. 16, when the structured document processor 55 allocated in thecomputer B 162 is directly called, some structured documents asprocessing requests cannot be accepted. The unaccepted processingrequest can be processed by employing the service of the structureddocument vulnerability avoidance system 123 allocated in anothercomputer C 161.

In this embodiment, there is provided a method in which the structureddocument vulnerability avoidance system 123 and the structured documentprocessor 55 are implemented in one computer to make one high-qualityprocessing system, and another method in which the structured documentvulnerability avoidance system 123 and the structured document processor55 are allocated in separate computers to provide the vulnerabilityavoidance service from the outside. That makes it possible to use thesesystems depending on the object.

Next, a description will be given of concrete examples of caring out theinvention in practice.

FIG. 17 shows as concrete examples of structured documents, four XML(extensible Markup Language) documents. These four XML documents ofdifferent representations with respect to the namespaces has the samecontents. In an example 170, while the namespace URI (Uniform ResourceIdentifiers) is “http://nec.com/name”, as a prefix, “prn” is set toexpress the element names such as “name”, “first” and “last” as“prn:name”, “prn:first”, and “prn:last”. In an example 171, in thenamespace URI, different prefixes, “prn”, “prn1” and “prn2”, are set forrespective elements to express the respective elements as “prn:name”,“prn1:first” and “prn2:last”. In an example 172, the namespace URL isset to a designated address and the elements are expressed as “name”,“first” and “last” without any prefix. In an example 173, as with theexample 170, “prn” is set as the prefix of the namespace URI. However,differently from the example 170, a plurality of spaces are input beforethe prefix.

While, with reference to FIG. 17, differences of the prefix and inputspaces with respect to the namespace are described above, there areother derived structured documents of different representations havingthe same contents. For example, derivative representations can varydepending on whether the attribute value is enclosed in single quotes ordouble quotes, or a character code is of UTF (Unicode TransformationFormat)-8 or UTF-16.

In the structured document derivation system 34 in FIG. 3, thestructured document 30 in a single representation is input to generate avariety of derivatives. For example, when the structured document 30 ofthe example 170 is input, it is fed to the structured document inputtingsection 31 to be converted to the system's internal representation.Then, the structured document derivative generator 32 generatesderivatives. The derivation functions 33 are provided as information onwhat derived documents should be generated. The derivation functions 33include, for example, derivation method for putting the prefix to thenamespace URI to automatically generate structured documents such as theexamples 171 to 173. Thus, the structured documents of differentrepresentations having the same contents 35 are output.

Next, a description will be given of a concrete example of the operationof the second embodiment.

The examples of the structured documents shown in FIG. 17 are of theuniform contents, and the structured document type defining document 180used in common among them is shown in FIG. 18. When derived structureddocuments are generated by using the structured document type definingdocument 180, the structured document derivation system 34 in FIG. 5 isapplied. The structured document type defining document 180, as thestructured document type defining document 40 is accepted by thestructured document type defining document inputting section 41, andprovides supplementary information to generate derivatives by thestructured document derivative generator 32. For example, with theinformation on data type of elements, when it is an integral typeelement, “+1” and “1” are equivalent, and therefore it is possible togenerate a derivative by putting “+” to an unsigned integer.

Next, a description will be given of a concrete example of the operationof the fifth embodiment.

In FIG. 7, for example, as the test structured document 50, the example170 is input, and as a structured document type defining document 40,the example 180 is input. As a result, the structured documentderivation system 34 generates derivatives such as the examples 171 to173. The testing device 51 tests the structured document processor 55with these derived structured documents. For example, the structureddocument processor 55 capable of receiving SOAP (Simple Object AccessProtocol) issues SOAP message calls each having the element “name” as anargument as in the examples 170 to 173. Whether or not the respectivemessage calls are properly processed is recorded, and from the testanalyzer 52 the vulnerability pattern 70 and the test result 53 areoutput. FIG. 19 shows an example of the vulnerability pattern 70 as anexample 80. In this example, a derivation type is described at a“target” attribute of a “feature” element, and an individual keyword forderivation is described at a “function” element of an “option” element.Whether or not the structured document processor 55 can accept adocument or a representation is expressed at a “result” element of an“option” element with “valid” or “invalid”. For example, for thederivation type of a “character-set”, the derivation form of a “utf-8”is “valid” and passes a test. On the contrary, the derivation form of a“utf-16” is “invalid”.

Next, a description will be given of a concrete example of the operationof the eighth embodiment.

Applying the example 80 of a vulnerability pattern in FIG. 19 to FIG.11, when a request from the structured document processing requestdevice 120 is sent to the structured document processor 55, anunacceptable structured document can be converted to an acceptable one.For example, with the example 80, a document of “utf-8” can be directlysent to the structured document processor 55, while a documentof“utf-16” is converted to that of “utf-8” at the pattern replacementdevice 122 so as to be acceptable to the processor 55.

According to the present invention, for a system in which processing isperformed by exchanging structured documents such as XML or SGML(Standard Generalized Markup Language) between computers, test cases ofXML or SGML can be produced in large quantities. Further, for a systemin which a processing is performed by exchanging structured documentssuch as XML or SGML between computers, a processor can be tested with avariety of derivatives. Furthermore, for a system in which a processingis performed by exchanging structured documents such as XML or SGMLbetween computers, vulnerability of the processing of a processor can beavoided.

As set forth hereinabove, according to the present invention, astructured document derivation system includes a structured documentderivative generator for generating derivatives of an input structureddocument with derivation functions having information on a variation ofrepresentations of the structured document. Thus, the structureddocument derivation system operates so that a plurality of derivativeshaving the same contents with a variety of representations can begenerated by inputting only a structured document without any structureddocument type defining document.

Further, by the structured document derivation system, a plurality ofderivatives can be generated to input to a structured documentprocessor. Thus, a plurality of derivatives having the same contentswith a variety of representations can be tested with the structureddocument processor and the vulnerability of the structured documentprocessor can be effectively extracted during the test.

Moreover, by a structured document test system, the derived structureddocuments can be tested beforehand to memorize a vulnerability patternas the results of the test, and when a structured document of thevulnerability pattern is input, the structured document is converted toa derivative in another pattern avoiding the vulnerability for beinginput to the structured document processor. Thus, it is possible toavoid the vulnerability of the structured document processor forprocessing a structured document in a pattern unacceptable to thestructured document processor in those of various representations inputto the processor.

Furthermore, inputs and outputs of a structured document vulnerabilityavoidance system are structured documents having the same contents, andthe avoidance system performs the vulnerability avoidance operation inan intermediate node as an independent system without changing theoperation of a structured document processing system. Thus, a qualityimprovement system can be achieved in an external device because thestructured document vulnerability can be avoided in an intermediate nodeother than the structured document processor.

While preferred embodiments of the invention have been described usingspecific terms, the description has been for illustrative purpose only,and it is to be understood that changes and variations may be madewithout departing from the spirit or scope of the following claims.

1. A structured document derivation system comprising: an inputtingsection for inputting a structured document; and a generator forgenerating derivatives of different representations without changing thecontents of the input structured document.
 2. A structured document testsystem for testing a structured document processing system, comprising:a generator for generating derivatives of different representationshaving the same contents; and a test section for testing the derivedstructured documents.
 3. A structured document vulnerability avoidancesystem being an intermediate processing system for a structureddocument, comprising: a section having information on one or morevulnerability patterns of derivatives of a structured document for astructured document processing system; and feeding section for replacinga structured document in a pattern that matches the vulnerabilitypattern with a derivative acceptable to the structured documentprocessing system and feeding the derivative to the structured documentprocessing system.
 4. A structured document derivation systemcomprising: an inputting section for accepting an input of a structureddocument; derivation functions for converting the representation of thestructured document without changing the contents of the structureddocument; and a structured document derivative generator for generatinga plurality of derived structured documents of various representationswithout changing the contents of the structured document by using theinput structured document and the derivation functions.
 5. Thestructured document derivation system claimed in claim 4, furthercomprising: a structured document type defining document inputtingsection for accepting an input of a structured document type definingdocument; wherein the structured document derivative generator generatesderived structured documents based on information from the structureddocument type defining document.
 6. A structured document test systemcomprising: the structured document derivation system claimed in claim 4or 5; a testing device for testing a structured document processor byapplying derived structured documents generated by the structureddocument derivation system; and a test analyzer for analyzing testresults obtained by the testing device to output the test results. 7.The structured document test system claimed in claim 6, wherein the testanalyzer further outputs, in addition to the test results, informationone or more vulnerability patterns which cannot be processed by thestructured document processor.
 8. The structured document test systemclaimed in claim 6, comprising a display for displaying the testresults.
 9. The structured document test system claimed in claim 6,comprising: a monitor for monitoring a processing request to thestructured document processor from a structured document processinggenerator to have a test structured document; wherein based on the teststructured document obtained from the monitor, derived structureddocuments are generated and the structured document processor is tested.10. A structured document vulnerability avoidance system comprising: astructured document processing request device for requesting thestructured document processor to perform structured document processing;a pattern sensing device for inputting a structured document processingrequest and a vulnerability pattern, and determining whether or not thestructured document processing request includes a structured documentthat matches the vulnerability pattern; and a pattern replacement devicefor replacing the structured document with one in a representation thatdoes not match the vulnerability pattern in the case that the patternsensing device has determined that the pattern of the structureddocument matches the vulnerability pattern.
 11. The structured documentvulnerability avoidance system claimed in claim 10, comprising: astructured document test system to have a vulnerability pattern to beutilized; wherein the vulnerability of the structured document processorcan be avoided in cooperation with results obtained by the structureddocument test system.
 12. The structured document vulnerabilityavoidance system claimed in claim 10, comprising: a monitor formonitoring the structured document processing request to the structureddocument processor; and a structured document test system for testingthe structured document processor by generating derived structureddocuments based on a test structured document from the monitor; whereinthe vulnerability pattern obtained as the test results is applied foravoiding the vulnerability of the structured document processor.
 13. Aquality improvement system for a structured document processorcomprising the structured document vulnerability avoidance systemclaimed in one of claims 10 to 12 placed on the same computer where thestructured document processor is placed, wherein the structured documentprocessor is not accessed directly from the outside but via thestructured document vulnerability avoidance system, and a structureddocument processing system not including vulnerability is built.
 14. Aquality improvement system for a structured document processorcomprising the structured document vulnerability avoidance systemclaimed in one of claims 10 to 12 placed on a second computer differentfrom a first computer on which the structured document processor isplaced, and the structured document vulnerability avoidance system onthe second computer avoids the vulnerability of the structured documentprocessor on the first computer.
 15. A structured document derivationmethod comprising the steps of: registering derivation functions capableof converting representation without changing the contents of astructured document, accepting an input of a structured document; andgenerating a plurality of derived structured documents in variousrepresentations without changing the contents.
 16. A structured documentderivation method comprising the steps of: registering derivationfunctions capable of converting representation without changing thecontents of a structured document; registering a structured documenttype defining document for a structured document; accepting an input ofa structured document; and generating a plurality of derived structureddocuments having different representations without changing the contentsusing the derivation functions and the structured document type definingdocument thus registered.
 17. A structured document test methodcomprising the steps of: testing a structured document processorapplying derived structured documents generated by the structureddocument derivation method claimed in claim 15, analyzing the results ofthe test; and outputting the results of the analysis as test results.18. The structured document test method claimed in claim 17, wherein thetest results include information on one or more vulnerability patternswhich cannot be processed by the structured document processor.
 19. Thetest method claimed in claim 17, comprising the step of displaying thetest results.
 20. The structured document test method claimed in claim17, further comprising the steps of: monitoring processing requests froma structured document processing generator to the structured documentprocessor; and accepting a structured document obtained through themonitoring as an input.
 21. A structured document vulnerability avoidingmethod comprising the steps of: registering a vulnerability pattern;inputting a structured document processing request to a structureddocument processor; determining whether or not the structured documentprocessing request includes the processing of a structured document in apattern that matches the vulnerability pattern registered; and when thestructured document processing request includes a structured documentthat matches the vulnerability pattern, replacing the representation ofthe structured document with one that does not match the vulnerabilitypattern.
 22. The structured document vulnerability avoiding methodclaimed in claim 21, further comprising the steps of: testing thestructured document processor by the structured document test method;and avoiding the vulnerability by applying the vulnerability patternobtained as the test results.
 23. The structured document vulnerabilityavoiding method claimed in claim 21, further comprising the steps of:monitoring the structured document processing request to a structureddocument processor; testing the structured document processor by usingthe results of the monitoring according to the structured document testmethod; and avoiding vulnerability by applying the vulnerability patternobtained as the test results.
 24. A program for making a computer toperform the processes of: registering derivation functions capable ofconverting representation without changing the contents of a structureddocument; accepting an input of a structured document; and generating aplurality of derived structured documents in different representationswithout changing the contents.
 25. A program for making a computer toperform the processes of: registering derivation functions capable ofconverting representation without changing the contents of a structureddocument; registering a structured document type defining document withrespect to a structured document; accepting an input of a structureddocument; and generating a plurality of derived structured documents invarious representations without changing the contents by using thederivation functions and the structured document type defining documentthus registered.
 26. The program claimed in claim 24, for making acomputer to perform the processes of: testing a structured documentprocessor applying the derived structured documents generated; analyzingthe results of the test; and outputting the results of the analysis astest results.
 27. The program claimed in claim 26, wherein the testresults include information on one or more vulnerability patterns, whichcannot be processed by the structured document processor.
 28. Theprogram claimed in claim 26 for making a computer to perform the processof displaying the test results.
 29. The program claimed in claim 26 formaking a computer to perform the processes of: monitoring a processingrequest from a structured document processing generator to thestructured document processor; and inputting a structured documentobtained through the monitoring.
 30. A program for making a computer toperform the processes of: registering a vulnerability pattern; inputtinga structured document processing request to a structured documentprocessor; determining whether or not the structured document processingrequest includes the process of a structured document that matches thevulnerability pattern; and when the structured document processingrequest includes a structured document that matches the vulnerabilitypattern, replacing the representation of the structured document withone that does not match the vulnerability pattern.
 31. A program claimedin claim 30, for making a computer to perform the processes of: testingthe structured document processor by the structured document testmethod; and registering one or more vulnerability patterns obtained asthe test results.
 32. The program claimed in claim 30, for making acomputer to perform the processes of: monitoring the structured documentprocessing request to the structured document processor; testing thestructured document processor by using the results of the monitoringaccording to the structured document test method; and registering one ormore vulnerability patterns obtained as the test results.